policy: Trace matched rules on deny rule
policy: Trace matched rules on deny rule

Previously, when a rule was hit that explicitly lead to a deny result,
the policy trace output would not print how many rules were matched. For
better output consistency, print it here.

Signed-off-by: Joe Stringer <16a9a54ddf4259952e3c118c763138e83693d7fd@covalent.io>

tgraf/cilium,michi-covalent/cilium,scanf/cilium,tklauser/cilium,scanf/cilium,cilium/cilium,eloycoto/cilium,scanf/cilium,scanf/cilium,tgraf/cilium,eloycoto/cilium,scanf/cilium,cilium/cilium,scanf/cilium,michi-covalent/cilium,michi-covalent/cilium,eloycoto/cilium,eloycoto/cilium,scanf/cilium,eloycoto/cilium,cilium-team/cilium,cilium-team/cilium,michi-covalent/cilium,cilium/cilium,eloycoto/cilium,tklauser/cilium,tklauser/cilium,cilium/cilium,eloycoto/cilium,tklauser/cilium,michi-covalent/cilium,tgraf/cilium,cilium/cilium,tklauser/cilium,tgraf/cilium,tgraf/cilium,tgraf/cilium